Homebrew fakeing a legit cia?

[Dan-the-Rebirth]

So i had an idea today...
We know legit cias contain files others dont, but why cant we decrypt a legit cia and inject a different game? We did it with vc games...

 

[johovahs]

So i had an idea today...
We know legit cias contain files others dont, but why cant we decrypt a legit cia and inject a different game? We did it with vc games...

Many of the goodies are kept private. Like some already have cfw with 7.x encryption working. Plus with gateway and other flashcarts, there is no need for legit CIAs. because it can run unsigned code. But for your question, it could be that no one figured it out yet or maybe someone has but hadn't made it public yet. But just get a gateway and enjoy. You will spend more time enjoying the new game releases without worrying when the next leak comes out.

 

[Dan-the-Rebirth]

I was asking because of the zelda exploid for gw xD a fake legit of oot would make things simpler^^

 

[cearp]

So i had an idea today...
We know legit cias contain files others dont, but why cant we decrypt a legit cia and inject a different game? We did it with vc games...

what files does a legit cia have that others do not?? (is this some riddle? because the answer is none!)

so, decrypt a cia, replace files, repack...
that means it's not legit anymore sorry lol
we cannot change anything about it, it is as simple as that

 

[leerpsp]

It would have to because if im thinking right Legit CIA's are signed so they would have at list one more file the others don't have that is not decrypted. so if we had that then any one can be made Legit.

 

[Aurora Wright]

It would have to because if im thinking right Legit CIA's are signed so they would have at list one more file the others don't have that is not decrypted. so if we had that then any one can be made Legit.

You don't know what you're talking about, a digital signature is, to put it simple, a long sequence of bytes that is used by the console to verify that *that* content was "approved by Nintendo" for use with that/all the console(s). Legit cias have a "approved for all consoles" signature, but if you tampered with the content it would invalidate the signature and it would need to be signed again. This is why we need exploits to run unsigned code at all.

 

[leerpsp]

You don't know what you're talking about, a digital signature is, to put it simple, a long sequence of bytes that is used by the console to verify that *that* content was "approved by Nintendo" for use with that/all the console(s). Legit cias have a "approved for all consoles" signature, but if you tampered with the content it would invalidate the signature and it would need to be signed again. This is why we need exploits to run unsigned code at all.

will you have to rip/build that Legit CIA file so in a way that would be Tampering with it so your logic on that is not 100% and yes I do know what im talking about You just retold me what I not only all ready know but in a longer way, The Digital Signature is not decrypted for the public if it was we would have that >FILE< to use with other CIA files to sign them with now do others have the file to sign other CIA'S yes I know so. And Aurora all files are a long sequence of bytes.

 

[The Real Jdbye]

To do that we would need the signing key that only Nintendo has. We can build legit CIAs from certain titles because their content is already signed to work on any console, and we simply take that unmodified content and pack it into a CIA container. However, we have no possible way of getting the signing key, since it's not stored on the 3DS itself, it's only used by Nintendo when they build CIA files. The 3DS uses a public key to verify the signature, but we need the private key to actually sign files. There is no way to figure out the private key by having the public key, and bruteforcing it is not viable since it would probably not be finished in our lifetime even if every computer in the world was part of the effort.

will you have to rip/build that Legit CIA file so in a way that would be Tampering with it so your logic on that is not 100% and yes I do know what im talking about You just retold me what I not only all ready know but in a longer way, The Digital Signature is not decrypted for the public if it was we would have that >FILE< to use with other CIA files to sign them with now do others have the file to sign other CIA'S yes I know so. And Aurora all files are a long sequence of bytes.

What makes you think other people have the private key used to sign CIAs? Unless you are talking about Nintendo themselves, there is no way anyone else could get the key.

 

[cearp]

It would have to because if im thinking right Legit CIA's are signed so they would have at list one more file the others don't have that is not decrypted. so if we had that then any one can be made Legit.

just because they are signed does not mean they have an 'extra' file!
it just mean the contents match up with the signature.
if the cia was not legit, it would be that the contents do not match up with the signature.
a cia file contains a few signatures, so editing any little part, will break at least one of them

 

[leerpsp]

[quote="What makes you think other people have the private key used to sign CIAs? Unless you are talking about Nintendo themselves, there is no way anyone else could get the key.[/quote]

Lets just say I know things

 

[froggestspirit]

So, all you have to do is just resign it. you have a 1 in 2(to the power of the number of bits in a signature) chance!
Though I'm still surprised not many things have been said about the ds flashcart cia, whose signature is apparently not checked...

 

[KingOfHell]

So, all you have to do is just resign it. you have a 1 in 2(to the power of the number of bits in a signature) chance!
Though I'm still surprised not many things have been said about the ds flashcart cia, whose signature is apparently not checked...

Ds flashcart cia? what?

Wouldn't that be a 1 in 2^2048 chance of correctly guessing the key?

Nobody outside of nintendo has the key, because if someone did they would be posting all over the internet "Hey, look how bick my peenie is! I have this and you cant have it!"

 

[froggestspirit]

1947294890fdb02983deadbeefguys249272949gdleet4821111111C. There's your key!
Anyways, the DS fashcart blacklist thing, I've heard the signature doesnt need to be proper for that one to work?

 

[cearp]

So, all you have to do is just resign it. you have a 1 in 2(to the power of the number of bits in a signature) chance!
Though I'm still surprised not many things have been said about the ds flashcart cia, whose signature is apparently not checked...

the whitelist gets broken and can't be loaded, so that is fine

 

[KingOfHell]

That's because it's just an older version of an official file. or what cearp said.

 

[froggestspirit]

the whitelist gets broken and can't be loaded, so that is fine

dang... I guess I heard wrong

 

[Zidapi]

Lets just say I know things

Not enough evidently, or else you wouldn't have had to make this thread...

 

[leerpsp]

Not enough evidently, or else you wouldn't have had to make this thread...

I did not make this thread man so your talking about Dan-the-Rebirth he made this thread.